APPENDIX B · DATA CLASSIFICATION RULE

Classify evidence before choosing where it may go.

A source classification rule makes permitted use explicit. Add organisation examples and the approved processing environment before a pilot begins.

Public

Published requirements, public standards and openly available lessons.

Internal

Operational evidence available to authorised organisational users.

Confidential

Supplier, customer or project evidence with limited access.

Restricted

Safety, personal, contractual or commercially sensitive evidence requiring controlled handling.

APPROVED PROCESSING ENVIRONMENTRULE OWNER